Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oZxpgW1Bcxek37uoU5AcM0JU5ME.roa
File: oZxpgW1Bcxek37uoU5AcM0JU5ME.roa (raw, json)
Hash identifier: 5xcwduSHb5aVuVDsECKq+yYU1bix/trFg5TGXroNaKk=
Subject key identifier: A1:9C:69:81:6D:41:73:17:A4:DF:BB:A8:53:90:1C:33:42:54:E4:C1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0334F948C487B4B39C1B3485D302CF617
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oZxpgW1Bcxek37uoU5AcM0JU5ME.roa
Signing time: Mon 24 Aug 2026 10:27:28 +0000
ROA not before: Mon 24 Aug 2026 10:27:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215590
IP address blocks: 85.209.135.0/24 maxlen: 24
87.121.218.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
194.113.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:4f:94:8c:48:7b:4b:39:c1:b3:48:5d:30:2c:f6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 24 10:27:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a19c69816d417317a4dfbba853901c334254e4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:da:55:46:52:ba:cb:ec:69:c3:44:8a:42:57:
64:6e:f1:83:c3:8d:ae:c5:a4:ee:df:6b:f8:b2:04:
ad:e9:eb:8e:06:7d:36:0c:49:4e:02:b8:96:1f:83:
d9:7b:2a:5d:d6:b9:1c:ad:69:d4:8d:6d:18:97:b7:
28:9d:20:27:56:89:a8:f7:c3:de:47:dc:59:da:3f:
fb:e3:9b:7a:c4:14:a2:a6:a1:fd:95:81:8f:c2:e7:
32:38:b5:46:28:12:e3:d1:8b:eb:21:17:a2:65:0a:
bf:d1:8d:cc:af:e5:b4:cd:c2:15:8c:19:0e:32:96:
59:d3:bd:bb:0d:63:ed:e3:21:06:8d:60:cf:3e:b6:
6e:8a:91:cc:00:42:31:94:a4:96:b7:20:45:0b:43:
a1:96:f4:66:43:c4:ae:df:5b:a1:03:ec:41:48:d1:
b7:06:e4:c0:8d:4a:5b:9a:d7:8f:a4:96:e2:b3:41:
95:90:fe:ee:7c:2c:62:c3:bd:64:a2:ac:43:b3:68:
f4:91:96:fe:39:80:84:5b:dc:2e:55:99:5c:31:97:
ae:63:ca:91:ae:13:44:3f:2f:e3:5e:bc:7c:d3:15:
a1:6f:4d:6f:af:8f:41:21:5a:76:f0:58:3f:bc:ba:
fa:fd:45:67:4c:2c:22:f3:55:12:ec:cb:46:b8:de:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9C:69:81:6D:41:73:17:A4:DF:BB:A8:53:90:1C:33:42:54:E4:C1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oZxpgW1Bcxek37uoU5AcM0JU5ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.135.0/24
87.121.218.0/24
109.206.243.0/24
185.246.222.0/24
194.113.38.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:53:93:4d:85:d1:e1:76:78:fb:f0:4b:d3:9d:b3:37:9b:f5:
14:62:2c:83:08:45:4b:67:5f:47:67:26:d7:1c:f1:46:5c:b8:
3e:9b:c5:9b:65:a4:04:81:d9:67:9e:2b:27:9e:a2:7b:32:64:
70:7c:9a:98:47:c6:55:f4:81:10:3d:fc:26:ec:ef:95:11:2f:
17:73:80:c5:94:bc:ad:21:82:a6:14:8b:07:c7:16:2f:83:49:
1a:5b:19:75:ce:92:53:75:34:72:99:9b:83:2a:2d:44:91:e4:
d2:34:3a:c0:0c:b6:11:d5:2d:83:21:8e:74:d9:95:d4:5c:f5:
e6:f1:1e:e1:f3:4f:a4:9c:d7:cc:77:d1:88:5c:a9:79:07:0e:
b1:22:74:2e:72:67:d4:7c:3e:ef:91:c6:6f:79:0e:8c:95:07:
13:37:5b:bd:74:1c:b8:6f:d2:d2:ed:97:ec:f1:9e:8c:00:94:
fa:8e:3b:c3:83:e2:4f:00:6c:de:9f:be:0a:2a:ba:4a:b7:2f:
39:1a:f9:59:01:c2:17:ca:ab:6a:a9:a5:1d:6a:d1:00:6e:4b:
73:3e:f9:70:3e:3f:fe:e2:68:08:52:2f:09:ac:f8:f3:47:40:
0f:45:74:a4:ca:74:fc:67:ec:b2:9b:c7:5a:29:40:a4:b3:96:
64:c7:d2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 04:13:16 2026 by rpki-client